Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
File: jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json)
Hash identifier: tkf9ukY6/aXdSJvwhHcYsm0HIro2ybqYo4P4am7r6tA=
Subject key identifier: 21:DF:5B:33:12:54:92:25:C3:B2:10:48:64:F8:48:3C:8A:6F:0F:71
Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Certificate issuer: /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Certificate serial: 01987486F3C01CE3A58E0EBE0897DD358ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
Manifest number: 14CB
Signing time: Mon 04 Aug 2025 10:00:57 +0000
Manifest this update: Mon 04 Aug 2025 10:00:57 +0000
Manifest next update: Tue 05 Aug 2025 10:00:57 +0000
Files and hashes: 1: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: yy3slu41sUHZpg+dOSU65NJb03Esxjn+iP+kiwW/R3M=)
2: orkmW_eZCcL4kmC7TM2XcG_njxM.roa (hash: WZm+hYZMy+CXUU6Z/uI/WhkL+3h0cGl03UVgN4cUA58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:f3:c0:1c:e3:a5:8e:0e:be:08:97:dd:35:8e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Validity
Not Before: Aug 4 10:00:57 2025 GMT
Not After : Aug 5 10:00:57 2025 GMT
Subject: CN=21df5b3312549225c3b2104864f8483c8a6f0f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ae:ef:74:3a:e0:48:32:32:49:bd:4c:1a:af:
06:4a:c4:ad:89:4d:eb:67:85:30:f8:fe:6e:eb:b0:
4a:a1:2c:bd:f7:28:53:61:7b:e5:24:ff:3e:48:20:
51:82:16:2c:69:5f:36:72:42:a4:c0:25:1c:72:fc:
56:b1:d6:50:f3:66:bf:d0:1c:c2:cc:f3:fe:29:3b:
bc:09:bc:68:69:a2:61:fb:52:0c:18:ac:36:b3:90:
1b:37:1b:3a:b9:c9:43:5e:0f:6b:66:98:cb:4a:ea:
38:66:21:fc:07:8f:9e:32:ce:dd:fd:62:96:38:98:
e0:a4:e0:e5:7d:8c:0f:18:9a:3d:64:a0:4e:7d:c2:
db:8d:0a:f5:8f:59:01:99:b6:0f:95:84:2c:8c:8b:
8d:a1:64:14:4b:10:92:02:ee:7f:52:2d:f5:57:e7:
75:61:5d:2b:60:9b:3b:9b:a2:e1:31:77:26:d8:af:
d1:e4:69:67:b5:1e:47:34:f8:03:6b:79:c4:8c:4e:
48:fb:f5:04:be:3b:05:ff:cb:91:3f:d4:72:e9:2d:
1c:52:ad:1e:38:0e:04:80:d1:8c:f7:9a:b8:13:e7:
9e:9f:3c:10:94:78:93:8d:d2:50:1c:76:58:ed:e5:
f1:40:a6:e1:41:ea:71:cb:a7:36:2d:f7:d4:cb:ed:
35:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DF:5B:33:12:54:92:25:C3:B2:10:48:64:F8:48:3C:8A:6F:0F:71
X509v3 Authority Key Identifier:
keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0a:e6:97:dd:3f:0a:85:4f:c4:c2:ab:82:da:e5:cb:f3:f5:
a9:cc:09:af:73:46:9b:00:a8:8b:a1:8f:8d:f6:7f:c3:94:03:
5d:12:4d:d7:5e:47:0b:3f:13:70:bc:2a:9a:a7:b3:66:46:e0:
f4:88:f4:c7:ce:87:2f:0a:84:04:c8:bb:39:89:64:8b:83:42:
b4:f4:21:80:ce:61:26:fd:c8:11:e9:6f:e6:5b:e4:93:5d:db:
d1:27:3c:68:ff:df:ca:5e:a5:ee:9f:5f:df:4d:10:1a:d3:be:
1d:21:5d:00:69:2a:5b:f3:49:f5:91:e0:11:b2:25:9c:19:c5:
fd:9a:90:ab:57:1b:9d:0c:0d:58:26:fd:f7:3f:c9:00:5e:31:
91:da:fa:96:4a:0c:00:d0:32:5b:38:54:78:77:08:10:54:59:
00:23:80:af:88:ba:ae:2e:6c:a3:3e:f6:10:71:8a:27:e8:47:
0f:f4:98:24:0d:da:cc:55:7d:01:ee:ec:08:02:b2:8f:ae:83:
f9:36:87:42:80:95:8d:87:04:97:9e:14:0d:96:8b:13:a1:50:
10:f9:38:21:35:a8:5b:bb:43:33:3b:49:14:d7:c1:df:72:59:
64:b4:3a:de:c8:ba:3a:d7:13:64:af:cb:cb:05:8f:10:eb:72:
7b:66:bc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:02:57 2025 by rpki-client